EthosOne security and hosting
Five rings between your data and anyone else
Data security
School data we process is stored in Australia via Amazon Web Services (AWS), in a database that belongs to one school; no other school can reach it and no EthosOne feature reads across schools.
Retrieval stays inside the school's own record. View our Trust Centre for more information. Try Draft with AI. The frame
No single control is trusted on its own. A breach would need several independent failures at once: and every release we attack our own walls to prove they hold.
Safety before you even ask
Digital technology in schools is never easy: but done well, it can make all the difference. This is how EthosOne has it handled before you even ask: your data stays yours, in Australia; defence-in-depth with AI hosted onshore; and we attack our own system every release.
Run at any scale. From one campus to a diocese, with every entity reporting the same way.
- Switch
- from your existing platform, for a low cost
- 25
- policy domains help you make sense of the policies you have, and the ones you need
- Every regulator
- in Australia and New Zealand supported
- Safe
- data, processing and AI based in Sydney and Melbourne via AWS
Coverage spans the eight Australian states and territories, with Commonwealth law applying across all of them, and separately New Zealand. Domain figures come from the PolicyAI Research Atlas.
Five independent rings
Each ring is a separate control. Together they mean an attacker would need to defeat identity, access path, database rules, file ownership and the AI boundary: not just one misconfiguration.
Identity
Proven at login. Never trusted from the browser.
Tenant identity is locked to the verified session. We prove who you are at login and carry that proof through every request: we never accept school context from the browser alone.
One locked path
Every read and write through one guarded gate.
There is a single guarded path for data access. Reads and writes pass through one controlled gate so isolation rules cannot be bypassed by a stray endpoint or shortcut.
Database guardrails
Ownerless records rejected; crown jewels encrypted.
Records without a valid owner are rejected at the database layer. Sensitive fields are encrypted so a breach at one layer does not expose crown-jewel data.
File storage
Private; ownership checked before every download.
Files are private by default. Before any download, we verify the requesting user owns or is authorised for that file: not just that they are logged in.
The AI surface
Retrieval stays home; the model sees only scoped context.
Retrieval stays in our Australian environment. The model is stateless and injection-resistant: it sees only scoped, school-specific context and holds no credentials of its own.
Verified every release
Continuously verified, every release: one cross-school attempt blocks the deploy.
We run synthetic attacker schools against our own platform before a deploy ships. Cross-tenant access is not a known risk we accept: it is a release gate.
The AI surface is governed too
Retrieval stays home. The model is stateless and sees only scoped context. We are an AI-native firm building for public good: with OECD principles, sovereign hosting and PolicyAI matched to your source of truth.
The seven we are asked every time.
Still weighing something up? Thirty minutes with us, on your own registers, answers the rest.
Get in contact01Where is our school's data stored?
Australia, onshore: databases and infrastructure stay in country. Frontier AI runs on Amazon Bedrock in AWS Sydney and Melbourne, and no external or overseas model is used.
02Can another school ever see our data?
Tenant identity is locked to the verified session. Ownerless records are rejected at the database layer, and we run synthetic cross-school attacks on every release.
03Do you use our data to train AI models?
No. Retrieval stays home; the model sees only scoped, school-specific context. See our AI governance page for how PolicyAI is governed.
04How do you know the isolation holds?
Continuously verified, every release: one cross-school attempt blocks the deploy.
05Do you support single sign-on with Microsoft Entra?
Yes. Single sign-on is through SAML and Microsoft Entra, with MFA, and it is set up for you as part of onboarding, so your IT team keeps control of every account. Sign-in with a school Google Workspace account is supported too.
06Are you ISO 27001 certified?
Not yet. Our information security management system is aligned to ISO 27001 and published in full, and certification is a stated objective. The Trust Centre carries the policies, data residency, sub-processors and incident response detail an IT adviser or a tender asks for.
07Five Rings of Defence | School Governance Security, in full: what does it cover?
The AI features run through Amazon's Bedrock facility, based in Melbourne and Sydney, meaning AI calls never leave the country. The model is stateless: it sees only the scoped context a request sends it, keeps nothing between requests, and is never trained on school content. Your data stays in Australia. Your risk stays with us. Your data stays yours. Onshore databases and Australian infrastructure. Defence-in-depth, not a single checkbox. Isolation-first. Identity proven at login, never trusted from the browser. One locked path for every read and write. We test our walls. Continuously verified, every release: one cross-school attempt blocks the deploy.
What are the AI paragraphs you are currently missing from your policies? Watch how we do it.
Free, under ten minutes, and yours to keep whether or not you talk to us.
“It meets all of the real frustrations of business directors in one place.”
“School governance and risk is a complex area without a clear solution.”
EthosOne fits the tools your staff and board already work in.
- WMicrosoft WordBoard packs and reports publish straight into your own template.
- OOutlook & TeamsObligations, reviews and actions land in the calendar your staff already use.
- GGoogle WorkspaceSign in with your school Google account. Docs and Drive connected.
- SSOSingle sign-onSAML and Microsoft Entra, so IT keeps control of every account.
- PDFPDF & CSV exportTake any register, report or evidence trail with you, any time.
Board-ready in 30 days
EthosOne supports everyone who plays a role in school governance.
Governance Clarity
Boards get consistent, ready-to-present insights.
Assurance Confidence
No blind spots, everything tracked under ownership.
Compliance Control
State-aligned obligations managed and visible.
Risk Transparency
ISO-aligned risk management with accountability.
Walk into the next board meeting already sure.
When the assessor calls, the evidence is already there.
Free templates for this
AI Vendor Assessment
Free AI Vendor Assessment for independent schools: AI-Vendor-Assessment.xlsx with a worked example, a four-page How-to and the What-next brochure for EthosOne Security and AI. Know where the student data goes before you sign.
Cyber Security and AI Policy
Cyber security and AI as one position the board can endorse: the control checklist, the AI principles and the data principles, with the AI maturity assessment as the next step and the AI Risk Register as the free download.
Why independent schools choose EthosOne
Governance clarity
Consistent, board-ready insights from one portal.
Assurance confidence
Named ownership keeps risk and actions visible.
Compliance control
State-aligned obligations managed in one cadence.
Risk transparency
ISO-aligned risk is governed, not just documented.
What are the AI paragraphs you are currently missing from your policies? Watch how we do it.
Free, under ten minutes, and yours to keep whether or not you talk to us.
The two we are asked every time.
Still weighing something up? Thirty minutes with us, on your own registers, answers the rest.
Get in contact01Where does our data live?
Frontier AI runs through Amazon Bedrock in AWS Sydney and Melbourne. Registers, drafts and evidence stay in the region.
Your content is not used to train models. The information security management system is published rather than described, and the Trust Centre sets out the controls in full.
The AI is an embedded helper inside the work, not a separate tool to learn. It drafts and finds; a person still approves.
02Five Rings of Defence | School Governance Security, in full: what does it cover?
The AI features run through Amazon's Bedrock facility, based in Melbourne and Sydney, meaning AI calls never leave the country. The model is stateless: it sees only the scoped context a request sends it, keeps nothing between requests, and is never trained on school content. Your data stays in Australia. Your risk stays with us. Your data stays yours. Onshore databases and Australian infrastructure. Defence-in-depth, not a single checkbox. Isolation-first. Identity proven at login, never trusted from the browser. One locked path for every read and write. We test our walls. Continuously verified, every release: one cross-school attempt blocks the deploy.
